Do Son Rapid7 reveals details of Ivanti zero-day CVE-2025-22457, a critical stack-based buffer overflow actively exploited by a China-linked group. Learn about the vulnerability and available patches.
zero-day
Microsoft reports active exploitation of a Windows CLFS zero-day (CVE-2025-29824) to escalate privileges and deploy ransomware. Learn about the attacks, the threat actors involved, and how to mitigate the risk.
Microsoft's April 2025 Patch Tuesday addresses 134 vulnerabilities, including a zero-day under active exploitation. This update covers critical RCE flaws in Windows, Office, and more
Uncover the details of the Android zero-day vulnerabilities exploited by Cellebrite. Stay informed about security updates now.
Learn about the sophisticated cyber-espionage tactics of the New OceanLotus group. Discover how they target critical sectors with advanced techniques and leverage zero-day vulnerabilities.
Discover the concerning campaign targeting Fortinet FortiGate firewalls. Learn how threat actors exploited vulnerabilities and established unauthorized access.
Learn about CVE-2024-43461, a newly discovered zero-day vulnerability impacting the Windows MSHTML Platform and posing a significant security risk.
Learn about the cyber espionage campaign 'Operation DevilTiger' by APT-Q-12. Explore their use of zero-day vulnerabilities and advanced tactics.
This zero-day vulnerability, designated CVE-2024-38112, has been addressed by Microsoft in its July 2024 Patch Tuesday update
In a recent wave of cyberattacks, TikTok has confirmed a zero-day vulnerability within its direct messaging system has been exploited
CVE-2024-4947 allow attackers to execute harmful code on users' systems, compromising sensitive data and taking control of their devices
The flaw, designated CVE-2024-4671, is a "use after free" bug located within the browser's "Visuals" component.
This actively exploited flaw, tracked as CVE-2023-6345, could allow attackers to remotely execute code on affected devices.
Security researchers have deconstructed the patch released by Microsoft and crafted a PoC exploit for the CVE-2023-36025 vulnerability.
The zero-day flaw, CVE-2023-47246, resides in SysAid on-premises software, allowing hackers to execute arbitrary code on vulnerable systems
Mandiant have discerned an active exploitation of a vulnerability within Citrix's NetScaler ADC and Gateway systems
CVE-2023-32409, a flaw that, quite alarmingly, allowed a remote attacker to break free from the confines of the Web Content sandbox
CVE-2023-28205, is a use-after-free vulnerability found in WebKit. It can be exploited by tricking targets into loading malicious web pages